Oluwadamilola Timothy A.

Hi, I'm Timothy, a Senior SOC & SIEM Engineer with 4+ years of experience helping organizations improve security visibility, strengthen threat detection and streamline security operations. I'm a Splunk Certified Power User. I design, build and tune production SIEM environments, write detections that catch real threats, and make dashboards that technical and non-technical teams can use. I specialize in turning raw, messy log data into clear views that help teams track security, system health and day-to-day operations in real time. I work across Splunk Enterprise, Splunk Enterprise Security, Microsoft Sentinel, Cribl Stream, SentinelOne and AWS. Expertise in SIEM Engineering & Security Operations: * Splunk & Sentinel Engineering: I deploy, configure and tune Splunk Enterprise, Splunk ES and Microsoft Sentinel environments for performance, reliability and scale, including search optimization and SPL development. * Log Onboarding & Parsing: I onboard and parse data from firewalls, EDR, Windows/Linux, syslog, cloud and application logs, with accurate field extraction and data transformation so every search returns clean, usable results. * Data Pipeline Optimization: I design Cribl Stream pipelines that filter, route and enrich data before it reaches the SIEM, cutting noise and license costs. * Detection Engineering: I develop security use cases, correlation searches and Sentinel analytics rules mapped to MITRE ATT&CK, then validate and tune them to reduce false positives and analyst fatigue. * AWS & Cloud Security: I onboard CloudTrail, CloudWatch, S3, EC2, Lambda and VPC Flow Logs into Splunk and Sentinel, and build detections and monitoring for cloud environments. * Dashboards & Visualization: I build SOC monitoring, incident response and executive reporting dashboards with clear KPIs and trend analysis. I use tokens, drilldowns and dynamic filters so users can explore data without writing SPL, and every panel loads fast and serves a clear purpose. * Incident Response & Threat Hunting: I triage alerts, hunt threats and support incident analysis and response across SIEM and EDR data, including phishing investigations, OSINT, threat intelligence enrichment and escalation workflows. Also Experienced In: * QRadar, Wazuh and Elastic Security * EDR/XDR platforms: SentinelOne, CrowdStrike and Microsoft Defender XDR * Vulnerability scanning and remediation tracking with Tenable/Nessus * Security awareness programs with KnowBe4 * Network analysis with Wireshark * Role-based access control and app-level permissions * Migrating legacy dashboards into modern, modular layouts * Python, PowerShell and Bash scripting for log ingestion, alert enrichment and SOC automation * Fixing and documenting open-source security tools (Zeek, Wazuh, Nmap, YARA, Volatility, Lynis, OWASP ZAP), including repairing broken builds and CI/CD pipelines (GitHub Actions) Whether you need a new SIEM deployment, log onboarding, detection tuning, AWS monitoring, dashboards or security automation, I build practical, scalable solutions that deliver real operational value. I've worked with internal security teams and external clients to optimize SIEM environments, develop detections, onboard data sources and improve investigation workflows. The result is teams that catch threats earlier, deal with less alert noise and respond faster.